Disclaimer: The CVEs referenced below have not yet been publicly disclosed, so details regarding their severity, impact, and potential attack vectors are not available at this time. This post will be updated as soon as additional information becomes publicly available.
Important: Grafana security update
Type/Severity
NetEye Product Security has rated this update as having an unknown security impact.
Topic
Updates for the grafana packages are now available for NetEye 4.
Asset Management: GLPI agent inventory submissions through satellites now work with the glpiinventory plugin On NetEye satellites, nginx proxies GLPI inventory submissions from agents to the GLPI instance running on the master. Until now, the proxy covered only one endpoint, Read More
NagVis: honor recognize_services and exclude_members for Icinga DB hostgroups When NagVis renders a hostgroup summary object, two map options control which member states may influence the icon: recognize_services: if disabled, only the host states matter for the group icon; exclude_members: Read More
Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the grafana packages are now available for NetEye 4. Security Fix for NetEye 4.50 12.4.13_neteye3.31.5-1 CVEs CVE-2026-15577CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2026-33374CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-93294CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Read More
RKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources Read More
Graph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the Read More
